Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e38362e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          5gTebufe1SNw9AI82FT1FW2mhsXkBAz1WnDcFxVZScg=
Subject key identifier:   77:43:E0:0F:5E:B3:5F:3F:F9:33:B6:ED:3A:5A:73:C1:E6:53:71:F5
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       676AA7E47A2E7E4AC824DC25A755C75EA0B296BA
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:54 +0000
ROA not before:           Tue 02 Jun 2026 19:40:54 +0000
ROA not after:            Tue 01 Jun 2027 19:45:54 +0000
asID:                     18822
IP address blocks:        190.8.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6a:a7:e4:7a:2e:7e:4a:c8:24:dc:25:a7:55:c7:5e:a0:b2:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:54 2026 GMT
            Not After : Jun  1 19:45:54 2027 GMT
        Subject: CN=7743E00F5EB35F3FF933B6ED3A5A73C1E65371F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:74:4e:61:bd:68:c8:72:fc:78:dd:a7:12:
                    7c:64:32:f9:0e:5e:68:fe:df:47:53:8f:5c:94:52:
                    04:8c:b9:88:70:98:52:e6:b7:08:c5:e3:f1:34:93:
                    fb:24:34:72:51:fc:77:86:2a:b3:9b:86:2f:bb:ea:
                    74:a2:d6:a9:1c:01:8f:bb:d8:18:7c:09:bc:f9:89:
                    13:00:63:a1:d8:d6:25:bb:01:f4:a4:20:d7:39:01:
                    cc:0a:94:29:7c:08:d2:8b:30:a9:a7:9c:15:5b:ff:
                    32:40:ef:bd:39:bd:d3:99:3b:08:fc:0f:31:2c:3b:
                    5c:cd:9f:90:40:cb:9b:86:30:02:3f:8a:84:86:f4:
                    b6:22:95:c6:4b:54:46:00:ee:13:59:9b:6e:27:44:
                    a0:65:b6:e6:a8:58:9c:b2:67:5a:15:83:91:20:e2:
                    98:bb:90:6d:a2:eb:79:96:d1:ea:32:f8:5b:31:43:
                    66:57:17:ea:7e:90:99:ab:40:8a:69:24:7c:12:33:
                    b9:e4:12:ee:57:07:1a:63:3e:6d:67:9c:cc:8b:fd:
                    a5:d0:31:37:27:ee:e2:ec:1f:ca:5b:b8:e2:14:a2:
                    44:09:8d:a3:df:99:ca:7c:17:3b:e5:be:49:d1:29:
                    cf:36:68:92:1b:1a:82:6a:3c:74:0e:33:20:78:ec:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:43:E0:0F:5E:B3:5F:3F:F9:33:B6:ED:3A:5A:73:C1:E6:53:71:F5
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:6a:58:ea:f5:7e:ec:55:cc:6c:b0:0d:ba:cd:2d:2c:5b:
         03:50:32:cd:cc:e4:2e:f5:ea:91:39:ce:f1:6f:0d:16:ce:99:
         93:79:84:36:ed:9a:7a:41:0b:5d:e5:6f:0d:ce:57:3e:a4:7b:
         be:23:10:e0:37:33:de:2e:32:68:d3:b0:b2:0a:b2:b4:ae:67:
         ad:76:ad:5a:a0:cd:2f:0a:18:00:10:17:d0:c2:83:1c:8e:ca:
         1b:16:43:ad:43:8d:c8:a9:60:30:cf:bc:5d:52:1d:55:c1:03:
         fa:14:0d:86:ad:29:64:0b:b8:75:36:8b:11:e4:1d:a8:3f:69:
         a8:6f:6c:82:4e:12:d1:60:ff:d5:b0:10:4b:7f:6b:bf:e5:9f:
         12:ab:1b:d2:1a:a0:a9:7b:58:64:e9:91:3e:d9:78:28:c5:5f:
         39:2d:0d:33:d9:b7:6a:ee:12:fc:14:6c:ee:cf:82:91:97:9a:
         d1:65:e6:28:24:ab:56:0f:82:21:94:f3:0f:eb:02:31:78:1e:
         46:a1:88:d5:72:27:bf:17:e5:31:2a:af:50:42:db:1c:27:1d:
         d5:6a:5d:28:8e:7e:f8:fc:7b:ad:95:a3:80:b1:ba:eb:f5:23:
         5d:6d:9e:d4:0c:80:05:fe:96:65:b5:03:92:b7:1c:62:d9:c4:
         5a:5a:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:46:54 2026 by rpki-client